$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft File: 13697C4A24DCE77089F778CD506D620711B4472B.mft (raw, json) Hash identifier: tSa8wKzbTCXIFPpb3dcTo32dvLjVhLc5wG8WWCz0WrI= Subject key identifier: E6:25:CE:C3:7D:42:49:6A:BB:C8:85:BD:CE:5D:70:E0:D8:C2:A0:0C Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B Certificate issuer: /CN=13697C4A24DCE77089F778CD506D620711B4472B Certificate serial: 305123D2DDDB798675CC4414AF4A970A80E97305 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft Manifest number: 0331 Signing time: Sat 28 Jun 2025 11:30:45 +0000 Manifest this update: Sat 28 Jun 2025 11:25:45 +0000 Manifest next update: Tue 01 Jul 2025 23:06:45 +0000 Files and hashes: 1: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: /rq1WhPl2nzWETUM/oiNyUY2THnfP1otKF0KD2KPb+U=) 2: 13697C4A24DCE77089F778CD506D620711B4472B.crl (hash: K1wsDctjFnXcLGnNv9z13RN4R9W4PRVKhHq40SEszUU=) 3: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: 5WAjPQFyaB8VU/xV/L/W+MpTyoJtVsIgPQ74sNXdzhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:51:23:d2:dd:db:79:86:75:cc:44:14:af:4a:97:0a:80:e9:73:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B Validity Not Before: Jun 28 11:25:45 2025 GMT Not After : Jul 1 23:06:45 2025 GMT Subject: CN=E625CEC37D42496ABBC885BDCE5D70E0D8C2A00C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ca:1d:ce:ac:b3:fb:96:7b:69:c7:75:93:df: 2d:2b:e9:5a:c6:ea:c6:4d:f9:00:49:95:f6:18:c4: ae:bf:54:75:1b:36:c6:ce:59:08:ba:32:fc:73:b6: e3:33:9f:5d:54:6f:70:27:56:8c:7d:99:84:3b:d4: 0a:55:28:04:b7:3e:ed:74:ec:32:e0:28:b0:4a:a5: c9:b8:6a:59:49:58:9d:db:a3:4a:5f:25:c6:db:1a: d2:2c:88:0a:b9:c7:b6:84:8b:b2:84:5e:19:16:24: 97:95:ce:63:27:ba:8f:cb:cc:6b:9b:46:52:c0:9e: 73:af:0a:2d:42:31:2b:cb:c5:5d:03:ac:ae:d0:41: 39:62:d9:76:ff:fb:22:1b:1e:75:aa:59:4d:ab:7e: a9:fb:ec:13:fd:aa:98:80:40:53:58:bd:64:2c:33: 4d:6e:6f:d5:e8:85:7a:8b:a6:55:27:16:b7:6c:df: bd:e9:ad:e4:44:70:b3:5e:41:a6:7b:43:67:7e:f1: b9:b2:20:d6:1a:c3:35:f3:34:b6:b8:ff:1a:75:2f: f5:6c:41:93:b1:3d:15:eb:53:46:96:91:57:81:d2: f5:62:f6:9f:cc:71:60:75:4e:ab:c2:0c:ac:4f:63: c8:ca:e0:7a:65:78:86:1f:26:25:f9:0d:65:6f:3b: f7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:25:CE:C3:7D:42:49:6A:BB:C8:85:BD:CE:5D:70:E0:D8:C2:A0:0C X509v3 Authority Key Identifier: keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:6a:14:78:aa:f3:bf:56:66:84:63:e8:4d:6d:06:0f:a3:96: 2a:98:33:f0:e1:ac:2b:54:5a:73:ba:6f:10:d9:ea:30:6b:69: 30:c8:52:c2:35:4a:7c:36:4f:b2:54:7b:22:69:f0:2e:2f:85: d2:56:3d:68:e2:2c:49:d7:3c:92:52:90:ca:d4:38:b9:37:45: d9:5e:ce:ba:dc:85:95:80:18:aa:9d:8d:17:6c:fa:b2:d4:96: 43:a9:ef:93:c2:88:43:df:c7:a8:53:6b:95:ed:a1:5d:88:2e: 95:ef:66:a6:17:a5:b3:b0:d7:cc:28:60:01:91:1c:c7:94:b0: c7:ea:dc:ca:a2:1a:a3:cb:d3:f0:67:1f:82:67:9a:4f:3e:7e: 69:03:b4:c8:2f:57:96:8b:10:0e:91:5f:31:a1:b6:34:66:4a: 0d:c2:94:29:6c:6f:4e:78:06:3d:68:7a:15:1a:ae:18:5c:f0: 29:1f:ed:e2:4a:0d:76:cb:ee:6a:d2:8e:6d:0d:f7:34:83:ab: f6:c1:95:b6:9e:24:44:b6:5a:44:4b:a3:16:0c:71:16:2c:2f: ca:68:6f:34:42:2c:22:c3:ac:f9:37:da:d3:4c:9e:dc:62:a7: 1c:48:9d:a4:65:ed:5d:6c:e4:8a:b0:8f:3b:7b:5d:03:0e:25: 62:76:38:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFEj0t3beYZ1zEQUr0qXCoDpcwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcx MUI0NDcyQjAeFw0yNTA2MjgxMTI1NDVaFw0yNTA3MDEyMzA2NDVaMDMxMTAvBgNV BAMTKEU2MjVDRUMzN0Q0MjQ5NkFCQkM4ODVCRENFNUQ3MEUwRDhDMkEwMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQyh3OrLP7lntpx3WT3y0r6VrG 6sZN+QBJlfYYxK6/VHUbNsbOWQi6MvxztuMzn11Ub3AnVox9mYQ71ApVKAS3Pu10 7DLgKLBKpcm4allJWJ3bo0pfJcbbGtIsiAq5x7aEi7KEXhkWJJeVzmMnuo/LzGub RlLAnnOvCi1CMSvLxV0DrK7QQTli2Xb/+yIbHnWqWU2rfqn77BP9qpiAQFNYvWQs M01ub9XohXqLplUnFrds373preREcLNeQaZ7Q2d+8bmyINYawzXzNLa4/xp1L/Vs QZOxPRXrU0aWkVeB0vVi9p/McWB1TqvCDKxPY8jK4HpleIYfJiX5DWVvO/f/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5iXOw31CSWq7yIW9zl1w4NjCoAwwHwYDVR0j BBgwFoAUE2l8SiTc53CJ93jNUG1iBxG0RyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzM1MDdmMy1mOGMwLTQxMGItYjE5ZS01N2U0OGJmMzIzMDUvMC8xMzY5N0M0QTI0 RENFNzcwODlGNzc4Q0Q1MDZENjIwNzExQjQ0NzJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcxMUI0 NDcyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYy MDcxMUI0NDcyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANqFHiq879WZoRj6E1tBg+jliqYM/DhrCtU WnO6bxDZ6jBraTDIUsI1Snw2T7JUeyJp8C4vhdJWPWjiLEnXPJJSkMrUOLk3Rdle zrrchZWAGKqdjRds+rLUlkOp75PCiEPfx6hTa5XtoV2ILpXvZqYXpbOw18woYAGR HMeUsMfq3MqiGqPL0/BnH4Jnmk8+fmkDtMgvV5aLEA6RXzGhtjRmSg3ClClsb054 Bj1oehUarhhc8Ckf7eJKDXbL7mrSjm0N9zSDq/bBlbaeJES2WkRLoxYMcRYsL8po bzRCLCLDrPk32tNMntxipxxInaRl7V1s5Iqwjzt7XQMOJWJ2OKY= -----END CERTIFICATE-----Generated at Mon Jun 30 19:07:53 2025 by rpki-client